CVE-2026-45955

A flaw was found in the Linux kernel's md/md-llbitmap component. This vulnerability occurs when a suspend operation times out, failing to properly reset a critical internal reference. This oversight leaves the system's page control structure in an unusable state. This issue can lead to system instability or a Denial of Service (DoS), where the system becomes unresponsive.

This vulnerability is rated as Low severity because triggering it requires specific local conditions under low-latency bitmap operations within the kernel's Multiple Devices (MD) subsystem, where a suspend timeout is an exceptional failure case. The affected code is not present in default kernels across released Red Hat Enterprise Linux versions, significantly limiting practical exposure. Even where present, exploitation requires local system activity and does not allow privilege escalation or data confidentiality loss, resulting at most in localized denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.